$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json) Hash identifier: ROuyOJYqyWZt7xgipTrBECMSFZfLw3k4k2emPGeJRBo= Subject key identifier: BD:C0:C8:22:4F:7D:0A:43:73:15:19:4E:03:B8:4F:5D:F9:49:C6:AA Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 08C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft Manifest number: 08AA Signing time: Thu 10 Sep 2026 20:39:08 +0000 Manifest this update: Thu 10 Sep 2026 20:39:07 +0000 Manifest next update: Thu 17 Sep 2026 20:39:07 +0000 Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: GMvmu+CUdP4zpSj0AARukqbP4fdHOPBiv13ICFqs+y4=) 2: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (hash: c00S8PMH6seb894IcBTA4+jGD8At/7O3wWr5RItqF8c=) 3: D5775FF4E54F11F0875E48B9366F56BC.roa (hash: dBaY0JbbVzl8W6CAtYQ8b8Su4AnGzP3sLeHSsKnDsdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Sep 10 20:39:07 2026 GMT Not After : Sep 17 20:39:07 2026 GMT Subject: CN=6aa3156c-378c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:a0:4f:16:92:66:26:48:30:40:8f:12:2e: 04:1b:43:2b:17:d4:e1:1c:a9:10:f8:c7:c8:fb:d7: 56:98:cf:86:36:9a:1d:02:46:4d:c6:eb:df:37:d3: 16:68:01:3e:61:55:25:0e:33:8b:7e:92:08:ac:0b: 71:b6:8b:16:3f:00:88:5b:3d:8c:13:60:c1:20:a2: 4a:93:6c:e6:c0:e1:c7:b6:59:1f:d7:b4:a1:68:aa: 96:2b:11:e9:0b:5a:48:8b:9d:cd:a8:75:ea:59:a7: a8:04:ad:62:bc:e5:15:e5:e6:45:0f:4c:ad:22:6a: a1:ed:90:a7:67:fd:ed:de:90:68:1b:6c:d3:32:e0: 81:1d:a0:78:6a:83:9b:20:cb:15:dd:1b:85:24:b1: 5a:f1:16:d8:ce:22:65:7f:62:c2:09:bf:82:6f:af: 95:49:10:76:ed:f1:22:4a:cd:85:cf:cc:25:fa:6e: 1a:e6:d7:1d:63:6c:42:2d:b9:72:31:ce:52:4b:46: d4:ad:dd:04:2c:38:46:94:fc:67:72:a9:d2:81:60: a5:8c:fe:5e:af:a6:44:c4:d8:42:e4:93:1f:55:2a: 02:56:62:21:9d:c8:f1:87:ac:17:8b:0a:81:87:64: 07:57:13:ec:c5:ad:1b:b9:68:15:26:72:bc:51:7b: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C0:C8:22:4F:7D:0A:43:73:15:19:4E:03:B8:4F:5D:F9:49:C6:AA X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:c5:b4:16:39:6c:43:3e:ee:32:af:9c:49:f2:8b:3d:b3:6c: d6:6c:1e:de:e1:3c:96:3e:b3:b2:23:56:ad:51:9f:03:c4:10: 95:10:ca:5d:60:c3:e7:c7:bd:08:97:7f:7d:97:93:16:21:2e: bd:fc:67:8d:29:6d:98:bb:44:c5:d1:b9:a2:52:6b:f1:1c:e0: b6:4b:75:ae:d5:30:b8:59:46:f1:0b:ec:97:b5:40:5a:fd:62: 4b:4c:e5:67:58:d3:2d:28:09:7a:bb:79:58:46:d4:af:4b:da: 78:e2:bb:96:1c:f6:9c:fa:e9:f8:57:b4:00:e4:95:80:95:97: 51:48:de:0e:97:cb:e8:ef:de:61:2e:93:a1:a9:2c:a1:ef:f7: a2:7e:df:9b:55:59:42:73:c5:72:48:c9:d4:1f:85:b3:92:f0: c1:5b:e9:20:ad:aa:26:b5:e2:dd:04:bf:da:f3:bd:de:a0:a9: 69:4b:01:a4:de:8e:8d:17:ea:ee:74:c2:d0:16:97:37:53:95: 9c:d7:eb:63:a4:62:5e:d0:82:7f:49:67:40:88:5c:61:53:4b: b8:09:2f:b5:d4:03:4b:ff:11:8a:07:eb:4c:c5:da:4b:9e:f9: 9b:c7:96:78:bd:d4:f5:3f:a3:85:3d:b8:47:59:0b:99:ea:74: 7a:18:a4:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjYwOTEwMjAzOTA3WhcNMjYwOTE3MjAzOTA3WjAYMRYwFAYD VQQDEw02YWEzMTU2Yy0zNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSygTxaSZiZIMECPEi4EG0MrF9ThHKkQ+MfI+9dWmM+GNpodAkZNxuvfN9MW aAE+YVUlDjOLfpIIrAtxtosWPwCIWz2ME2DBIKJKk2zmwOHHtlkf17ShaKqWKxHp C1pIi53NqHXqWaeoBK1ivOUV5eZFD0ytImqh7ZCnZ/3t3pBoG2zTMuCBHaB4aoOb IMsV3RuFJLFa8RbYziJlf2LCCb+Cb6+VSRB27fEiSs2Fz8wl+m4a5tcdY2xCLbly Mc5SS0bUrd0ELDhGlPxncqnSgWCljP5er6ZExNhC5JMfVSoCVmIhncjxh6wXiwqB h2QHVxPsxa0buWgVJnK8UXv/VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3AyCJP fQpDcxUZTgO4T135ScaqMB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5l X3FLLTNXZXZzYmdqaU9YckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArcW0FjlsQz7uMq+cSfKLPbNs1mwe3uE8lj6zsiNWrVGfA8QQlRDKXWDD58e9 CJd/fZeTFiEuvfxnjSltmLtExdG5olJr8Rzgtkt1rtUwuFlG8Qvsl7VAWv1iS0zl Z1jTLSgJert5WEbUr0vaeOK7lhz2nPrp+Fe0AOSVgJWXUUjeDpfL6O/eYS6Toaks oe/3on7fm1VZQnPFckjJ1B+Fs5LwwVvpIK2qJrXi3QS/2vO93qCpaUsBpN6OjRfq 7nTC0BaXN1OVnNfrY6RiXtCCf0lnQIhcYVNLuAkvtdQDS/8RigfrTMXaS575m8eW eL3U9T+jhT24R1kLmep0ehikqQ== -----END CERTIFICATE-----Generated at Fri Sep 11 13:54:30 2026 by rpki-client